Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File:                     vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier:          Lr12PqCso/ef80CJYD0OodvcUGy3FXQpkwIfMRSALso=
Subject key identifier:   46:19:95:E9:20:FA:02:8A:8D:D6:DB:6E:7B:96:C9:49:8A:B2:97:0B
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer:       /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial:       019F7286702FE5F2A90B361F91C73ABFD5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number:          076C
Signing time:             Sat 18 Jul 2026 00:00:40 +0000
Manifest this update:     Sat 18 Jul 2026 00:00:40 +0000
Manifest next update:     Sun 19 Jul 2026 00:00:40 +0000
Files and hashes:         1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
                          2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
                          3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: Ck1DUAmYoTgCSQ5Q16uqOV61HvFoMy8mkRwkg6gR2DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:72:86:70:2f:e5:f2:a9:0b:36:1f:91:c7:3a:bf:d5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
        Validity
            Not Before: Jul 18 00:00:40 2026 GMT
            Not After : Jul 19 00:00:40 2026 GMT
        Subject: CN=461995e920fa028a8dd6db6e7b96c9498ab2970b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:70:11:ab:81:11:ba:ed:25:e3:8e:44:fd:
                    c9:e8:2a:d2:26:5f:dc:e7:b4:90:62:08:07:4d:89:
                    25:b9:66:43:60:4d:c9:3f:8b:e2:67:1f:66:b9:c6:
                    e5:ab:3d:86:fa:ef:c5:48:4c:d5:28:51:44:bd:1c:
                    fa:a1:04:2b:cf:8f:15:bc:8a:7f:6a:8f:19:1d:d4:
                    8d:3e:1c:c1:e6:fb:de:4b:af:d2:22:dc:01:ee:10:
                    04:9e:e5:91:d3:7e:9d:cf:75:a2:fa:ee:13:b3:85:
                    9c:91:6d:6c:f8:05:c1:eb:f2:8b:58:c5:5b:d7:fc:
                    7e:3f:63:64:3a:5e:41:1d:f0:71:26:bb:70:83:e7:
                    0a:22:2f:43:48:45:55:06:20:57:63:6f:f1:ad:86:
                    76:60:b9:92:1a:29:a7:a6:98:08:01:cb:e9:e3:3f:
                    7b:c1:93:70:eb:dd:1f:7f:ac:b0:32:7b:ce:e8:5c:
                    83:b5:5f:97:7b:2f:52:c5:66:89:e4:87:57:12:42:
                    c2:d6:7e:0f:d0:2a:94:d9:bf:f9:bb:93:b1:f6:2f:
                    db:73:ac:78:69:f6:2b:8b:3c:2c:40:58:f2:88:aa:
                    8f:ca:d3:39:3a:27:ce:6e:d0:1a:89:a4:06:20:f6:
                    f5:7f:af:c0:00:f6:e0:0e:62:20:5d:1a:4a:4b:85:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:19:95:E9:20:FA:02:8A:8D:D6:DB:6E:7B:96:C9:49:8A:B2:97:0B
            X509v3 Authority Key Identifier:
                keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ae:53:bf:30:60:bf:04:a4:88:27:18:d2:53:7b:37:e5:9f:
         05:80:50:44:e5:81:07:84:e5:91:87:48:42:e1:08:f7:8d:5f:
         56:dd:79:7c:28:8d:29:10:d3:9f:2c:26:6c:c4:bf:e3:f4:20:
         ea:79:c4:7a:fc:14:89:2c:7e:22:b4:96:69:8d:7b:62:36:4f:
         82:1f:22:75:20:f6:e8:25:0b:f3:a1:5b:0e:46:e4:fb:18:54:
         29:57:73:34:29:68:b2:b1:72:1f:3e:eb:66:a0:5c:de:43:d8:
         a9:21:d6:c7:ac:12:7a:9a:8e:f4:5e:ad:85:26:9e:19:45:5d:
         2b:12:cd:31:3d:d0:b8:51:4e:ac:a5:a4:be:7a:c7:fe:75:49:
         db:10:4b:56:ed:b3:4d:32:e4:b3:d9:e5:bc:51:22:f5:64:11:
         0b:78:86:27:49:5b:3d:4c:6b:c8:d8:ab:26:4b:4e:45:94:61:
         a3:da:be:2e:de:fd:e6:0d:28:79:9c:b5:ec:f4:b5:dc:cd:1e:
         1e:22:15:91:ed:df:31:8d:f2:2d:a8:27:8a:6f:bb:13:06:59:
         0a:1c:39:bf:76:cf:5d:e7:fd:27:3c:5a:56:7b:a1:0f:c8:70:
         fd:91:d4:70:ff:d8:81:88:9a:e3:03:d0:cf:ae:92:30:ed:39:
         c1:3f:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:50:25 2026 by rpki-client